GRC Security Presales Lead — Vendor Risk & Trust

Maven Ventures; Palo Alto (CA); Presencial; USD 100.000 - 228.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity

Medical, Vision, Dental

401(k)

Disability insurance

Life insurance

Employee discounts

Descripción de la vacante

SpaceXSI is seeking a mid-to-senior GRC professional focused on third-party risk and customer trust. You will be the security and compliance SME in sales, complete vendor security questionnaires, and drive third-party risk processes across the organization.

Ideal candidates understand AI governance, CI/CD pipelines, IAM, DevSecOps, and Kubernetes in production. You will also collaborate with Legal, Product, and Engineering to keep materials current as architecture and certifications evolve.

Formación

• 5+ years in cybersecurity, GRC, or vendor risk with customer-facing duties.
• Experience owning vendor security questionnaires and due-diligence discussions.
• Strong knowledge of SOC 2, ISO 27001, NIST CSF and related controls.

Responsabilidades

• Attend customer meetings as security and compliance SME for presales.
• Own responses to vendor security questionnaires, RFPs, and CAIQ-style assessments.
• Develop a reusable knowledge base of control narratives from SpaceXSI processes.
• Maintain fluency across AI/LLM governance, IAM, DevOps/DevSecOps, and Kubernetes.

Conocimientos

GRC program mgmt

Vendor risk mgmt

Presales security

AI governance

Cloud security

IAM

Kubernetes

Compliance frameworks

Educación

CS/Security degree

Herramientas

Vanta

Drata

Descripción del empleo

SpaceXSI is seeking a mid-to-senior GRC professional focused on third-party risk and customer trust. You will be the security and compliance SME in sales, complete vendor security questionnaires, and drive third-party risk processes across the organization.

Ideal candidates understand AI governance, CI/CD pipelines, IAM, DevSecOps, and Kubernetes in production. You will also collaborate with Legal, Product, and Engineering to keep materials current as architecture and certifications evolve.